RHSA-2026:5944

csafDEsuse_csaf

security update for golang

view advisory published 2026-03-26

security update for golang

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2026-25679US——
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
CVE-2025-61731US——
Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go…
02

references

External citations — patches, advisories, analysis.

03

remediations (16)

  • Fixedgo-toolset-0:1.25.8-1.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgo-toolset-0:1.25.8-1.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgolang-0:1.25.8-1.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgolang-0:1.25.8-1.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgolang-bin-0:1.25.8-1.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgolang-bin-0:1.25.8-1.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgolang-docs-0:1.25.8-1.el9_6.noarch as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgolang-docs-0:1.25.8-1.el9_6.noarch as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgolang-misc-0:1.25.8-1.el9_6.noarch as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgolang-misc-0:1.25.8-1.el9_6.noarch as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgolang-race-0:1.25.8-1.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgolang-race-0:1.25.8-1.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgolang-src-0:1.25.8-1.el9_6.noarch as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgolang-src-0:1.25.8-1.el9_6.noarch as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgolang-tests-0:1.25.8-1.el9_6.noarch as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedgolang-tests-0:1.25.8-1.el9_6.noarch as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan